CVE-2017-0003 Microsoft Office Remote Code Execution Vulnerability (MS17-002)

A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory.

The security update addresses the vulnerability by correcting how affected versions of Office and Office components handle objects in memory. Affected Versions:
Microsoft Word 2016 and Microsoft SharePoint Enterprise Server 2016

An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user.

Refer to MS17-002 for more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

MS17-002: Microsoft Word 2016 (32-bit edition)

MS17-002: Microsoft Word 2016 (64-bit edition)

MS17-002: Microsoft SharePoint Enterprise脗聽脗聽脗聽脗聽脗聽脗聽Server 2016